StackRadar

CVE-2018-10237

Medium

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.051
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
155
deployed by those charts
Fix available
1 of 2
affected packages

Denial of Service in Google Guava

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 155 images.

Affected packageAffected versionsFixed inImages
guavamaven11.0.1, 11.0.2, 13.0.1, 14.0+15 more24.1.1-android139
guava-jdk5maven13.0, 17.0no fix listed18
OSV records
GHSA-mvr2-9pj6-7w5j

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
opentsdbgradiant-bigdataVerified publisher0.1.74 of 6See more

opentsdb gradiant-bigdata 0.1.7

4 of the 6 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
guava@11.0.2
24.1.1-android
gradiant/hdfs:2.7.73b28784ba41f
guava@11.0.2
24.1.1-android
gradiant/opentsdb:2.4.0c33d53913869
guava@18.0
24.1.1-android
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
guava@24.0-jre
24.1.1-android

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
guava@14.0.1
24.1.1-android

Open the chart page →

6,147
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
guava@19.0
24.1.1-android

Open the chart page →

6,362
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
guava@11.0.2
24.1.1-android

Open the chart page →

10,540
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
guava@14.0.1
24.1.1-android

Open the chart page →

8,541
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ibmcom/app-nav-was-controller:1.0.1a6748792da26
guava@18.0
24.1.1-android

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
guava@22.0-android
24.1.1-android

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
guava@20.0
24.1.1-android
ibmcom/microclimate-theia:lateste17bdccc5030
guava@18.0
24.1.1-android

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
guava@20.0
24.1.1-android

Open the chart page →

19,295
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
guava@13.0.1
24.1.1-android

Open the chart page →

37,671
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
guava@14.0.1
24.1.1-android

Open the chart page →

6,174
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
guava@14.0.1
24.1.1-android

Open the chart page →

10,777
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
guava@11.0.1
24.1.1-android

Open the chart page →

10,682
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
guava@20.0
24.1.1-android

Open the chart page →

7,498
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
guava@20.0
24.1.1-android

Open the chart page →

16,877
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
guava@18.0
24.1.1-android

Open the chart page →

26,356
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
guava@19.0
24.1.1-android

Open the chart page →

6,634
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
guava@15.0
24.1.1-android

Open the chart page →

7,929
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
guava@19.0
24.1.1-android

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
guava@19.0
24.1.1-android

Open the chart page →

4,599
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
guava@11.0.2
24.1.1-android

Open the chart page →

15,855
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
guava@15.0
24.1.1-android

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
guava@15.0
24.1.1-android

Open the chart page →

10,603
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
guava@19.0
24.1.1-android

Open the chart page →

9,300
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
guava@18.0
24.1.1-android

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
guava@20.0
24.1.1-android

Open the chart page →

55,726
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
guava@20.0
24.1.1-android

Open the chart page →

2,640
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
guava-jdk5@17.0
no fix listed

Open the chart page →

3,582
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
guava@18.0
24.1.1-android

Open the chart page →

41,427
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
guava@18.0
24.1.1-android

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
guava@19.0
24.1.1-android

Open the chart page →

8,540
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
guava@19.0
24.1.1-android

Open the chart page →

2,421
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
guava@21.0
24.1.1-android

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
guava@19.0
24.1.1-android

Open the chart page →

88,546
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
guava@16.0
24.1.1-android
omecproject/c3po-hssdb:master-latest28a90cc26716
guava@16.0
24.1.1-android

Open the chart page →

40,715
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
guava@22.0
24.1.1-android

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
guava@19.0
24.1.1-android

Open the chart page →

38,865
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
guava@22.0
24.1.1-android
voltha/voltha-onos:5.1.8e038acb950d3
guava@22.0
24.1.1-android

Open the chart page →

41,044
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
guava@20.0
24.1.1-android

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
guava@20.0
24.1.1-android

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
guava@20.0
24.1.1-android

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
guava@20.0
24.1.1-android

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
guava@20.0
24.1.1-android

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
guava@20.0
24.1.1-android

Open the chart page →

13,100
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
guava@18.0
24.1.1-android

Open the chart page →

36,215
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
guava@24.0-jre
24.1.1-android

Open the chart page →

4,177
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
guava@11.0.2
24.1.1-android

Open the chart page →

9,606
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
guava@19.0
24.1.1-android

Open the chart page →

8,098
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.4.01bbda887bc53
guava@20.0
24.1.1-android

Open the chart page →

10,967
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2018-10237.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
guava@21.0
24.1.1-android

Open the chart page →

8,804

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.1_local75f00caa6f3f
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:improve-testing-performance8e9d15ed71c7
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
guava-jdk5@17.0
no fix listed
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
guava@19.0
24.1.1-android
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
guava@21.0
24.1.1-android
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.